Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
File:                     bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer (raw, json)
Hash identifier:          adZUVuzmfjgEofElrSLgUgxqVRHiAU/lwbh17vQnBbE=
Subject key identifier:   3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2D74C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 09:00:47 +0000
Certificate not after:    Wed 28 Feb 2024 18:48:17 +0000
Subordinate resources:    AS: 271908
                          IP: 131.255.17.0 -- 131.255.19.255
                          IP: 2803:1210::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14866252 (0xe2d74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 09:00:47 2023 GMT
            Not After : Feb 28 18:48:17 2024 GMT
        Subject: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:fa:0f:8d:00:1e:2b:10:27:32:72:c6:1a:
                    51:2a:c8:00:ad:b6:96:88:12:e8:ef:11:d2:36:03:
                    87:59:bd:bb:87:69:58:58:bf:b3:2d:27:bc:87:cf:
                    4c:32:0e:44:e5:45:10:52:08:ee:ef:95:ff:28:f2:
                    c8:d2:ed:63:d6:b0:1f:d9:cb:b0:fc:3b:8d:1d:e2:
                    2c:27:46:8f:e1:7f:2d:58:3d:2d:e1:e3:34:f2:98:
                    a0:c0:1f:b4:c3:ac:a8:ef:8f:70:b5:c7:23:9c:91:
                    9c:0f:b2:ca:71:7d:78:23:fe:e3:c0:ac:10:d8:78:
                    cb:4d:49:e6:98:ef:f1:6e:ee:d1:61:5d:7b:33:d2:
                    19:b8:83:10:a3:95:c7:35:ff:b9:a7:64:2d:2d:43:
                    89:f0:67:ab:c0:2b:52:cc:30:03:4d:01:9c:69:ad:
                    0a:59:cc:47:a3:31:54:6f:0d:da:bd:05:d9:91:6d:
                    95:3b:f7:65:02:55:57:b2:fd:8f:c2:e0:42:56:1e:
                    44:30:66:6f:f2:dd:7a:24:9a:9d:82:e9:ab:3b:42:
                    04:5e:d1:1e:0a:49:33:f9:6e:1d:c8:a2:7c:b3:d7:
                    f9:d7:be:dd:74:50:5c:3b:21:17:85:92:95:da:19:
                    d7:f3:0b:91:5f:67:1a:31:ff:c5:3b:39:32:30:0a:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0-131.255.19.255
                IPv6:
                  2803:1210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271908

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:11:48:55:81:01:fd:33:9c:1e:ce:8c:8b:b9:34:a9:4a:
         4b:30:6d:d3:bf:4e:48:60:3a:04:5d:da:db:e6:38:dd:4d:85:
         3e:dc:45:d1:1f:d0:ab:78:10:b0:3f:4b:19:38:12:34:3f:4a:
         53:e1:3e:fe:29:d6:20:9e:e9:25:0b:6a:4f:ec:dd:11:ce:ad:
         62:7d:5c:70:9c:f7:a6:6a:e8:f4:2f:99:7c:d7:43:7d:cf:f1:
         16:cd:17:72:ee:ab:cb:ac:2c:b0:19:8a:d9:a4:e5:9d:1e:36:
         7b:bc:f2:4f:fe:6f:93:18:fb:e1:66:48:c3:13:86:d1:d4:e8:
         ff:91:c1:34:ab:ea:13:4d:91:25:e6:a7:77:82:4d:39:22:bf:
         23:4e:4b:9d:6c:0d:ab:02:d9:af:c4:9c:1d:90:94:a2:41:e4:
         d2:25:e6:ae:84:17:e9:0e:0e:c0:ee:82:8f:9a:30:ca:3c:b3:
         e1:a3:bd:31:5e:22:da:e7:0e:38:70:8b:36:4f:c8:92:c1:b8:
         9f:48:ac:0e:ec:9c:7b:82:e9:9a:3a:13:16:8b:20:59:bf:e3:
         f3:a1:2a:6e:5f:17:68:be:af:55:a5:e2:0b:8a:ff:ea:68:2d:
         2c:80:c0:3a:5d:85:0d:52:90:2e:50:31:85:86:1c:06:2e:94:
         51:8d:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----